Adobe Substance 3d Designer vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Adobe Substance 3d Designer: 32 record(s), with affected versions and fixes.cpe:2.3:a:adobe:substance_3d_designer
CVE-2026-103829
Medium · 5.5
CWE-476 Oct 13, 2026
Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103828
Medium · 5.5
CWE-476 Oct 13, 2026
Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103827
Medium · 5.5
CWE-121 Oct 13, 2026
Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103826
Medium · 5.5
CWE-476 Oct 13, 2026
Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103825
Medium · 5.5
CWE-125 Oct 13, 2026
Substance3D - Designer | Out-of-bounds Read (CWE-125)
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103824
Medium · 5.5
CWE-476 Oct 13, 2026
Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103823
Medium · 5.5
CWE-121 Oct 13, 2026
Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103822
Medium · 5.5
CWE-125 Oct 13, 2026
Substance3D - Designer | Out-of-bounds Read (CWE-125)
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103821
High · 7.8
CWE-787 Oct 13, 2026
Substance3D - Designer | Out-of-bounds Write (CWE-787)
Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-71564
High · 7.8
CWE-787 Aug 25, 2026
Substance3D - Designer | Out-of-bounds Write (CWE-787)
Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-48433
High · 7.8
CWE-122 Aug 25, 2026
Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-48432
High · 7.8
CWE-122 Aug 25, 2026
Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-48431
High · 7.8
CWE-122 Aug 25, 2026
Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-48430
High · 7.8
CWE-122 Aug 25, 2026
Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-48429
Medium · 5.5
CWE-476 Aug 25, 2026
Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-48428
High · 7.8
CWE-122 Aug 25, 2026
Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-48427
High · 7.8
CWE-787 Aug 25, 2026
Substance3D - Designer | Out-of-bounds Write (CWE-787)
Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-48426
High · 7.8
CWE-787 Aug 25, 2026
Substance3D - Designer | Out-of-bounds Write (CWE-787)
Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-34684
High · 7.8
CWE-787 May 12, 2026
Substance3D - Designer | Out-of-bounds Write (CWE-787)
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-34683
High · 7.8
CWE-787 May 12, 2026
Substance3D - Designer | Out-of-bounds Write (CWE-787)
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-34682
High · 7.8
CWE-787 May 12, 2026
Substance3D - Designer | Out-of-bounds Write (CWE-787)
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-34681
High · 7.8
CWE-787 May 12, 2026
Substance3D - Designer | Out-of-bounds Write (CWE-787)
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-34664
Medium · 6.3
CWE-22 May 12, 2026
Substance3D - Designer | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Substance3D - Designer versions 15.1.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVE-2026-21340
Medium · 5.5
CWE-125 Feb 10, 2026
Substance3D - Designer | Out-of-bounds Read (CWE-125)
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-21339
Medium · 5.5
CWE-125 Feb 10, 2026
Substance3D - Designer | Out-of-bounds Read (CWE-125)
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.